WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress Logo Carousel plugin is vulnerable to authorization issues in versions prior to 3.4.2. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network system or product. An attacker could exploit the vulnerability to copy and view arbitrary private posts from other users.